WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-434✕
Overview 21 matches · 1 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC
21matches 1in Waratek scope4.8% 1protected4.8% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0%
Protected by Waratek 1 4.8% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 4.8% Not applicable 19 90.5% Withdrawn CVE 0 0.0%
Critical 9 42.9% High 12 57.1% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 4.8% partly blocked 0 0.0% not blocked 20 95.2% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 21 100.0% No public exploit 0 0.0%
split by peak 11 / year
Not applicable: 19Outside Waratek scope: 1Protected by Waratek: 1 High: 12Critical: 9 not blocked: 20blocked by ARMR today: 1 Forecast only: 21
20202 Not applicable2 Critical1 High1 not blocked2 Forecast only2 202111 Protected by Waratek1 Outside Waratek scope1 Not applicable9 Critical5 High6 blocked by ARMR today1 not blocked10 Forecast only11 20222 Not applicable2 High2 not blocked2 Forecast only2 20233 Not applicable3 Critical2 High1 not blocked3 Forecast only3 20242 Not applicable2 High2 not blocked2 Forecast only2 20250 20261 Not applicable1 Critical1 not blocked1 Forecast only1
2020202120222023202420252026
21 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-2701 Critical 2026-04-02 Not applicable Forecast only Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.
CVE-2024-29848 High 2024-05-31 Not applicable Forecast only An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.
CVE-2023-38095 High 2024-05-03 Not applicable Forecast only NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the MFileUploadController class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-19717.
CVE-2023-46264 Critical 2023-12-19 Not applicable Forecast only An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution.
CVE-2023-46263 Critical 2023-12-19 Not applicable Forecast only An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution.
CVE-2023-6187 High 2023-11-18 Not applicable Forecast only The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'pmpro_paypalexpress_session_vars_for_user_fields' function in versions up to, and including, 2.12.3. This makes it possible for authenticated attackers with subscriber privileges or above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This can be exploited if 2Checkout (deprecated since version 2.6) or PayPal Express is set as the payment method and a custom user field is added that is only visible at profile, and not visible at checkout according to its settings.
CVE-2022-30216 High 2022-07-12 Not applicable Forecast only Windows Server Service Tampering Vulnerability
CVE-2021-34995 High 2022-01-13 Not applicable Forecast only This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DownloadCenterUploadHandler class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-13756.
CVE-2021-43829 High 2021-12-14 Not applicable Forecast only PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlManager unrestrictly handle upload files in the findings import feature. This vulnerability is capable of uploading dangerous type of file to server leading to XSS attacks and potentially other forms of code injection. Users are advised to update to 1.7.7 as soon as possible. There are no known workarounds for this issue.
CVE-2021-42125 High 2021-12-07 Not applicable Forecast only An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.
CVE-2021-40344 High 2021-10-26 Not applicable Forecast only An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. Therefore it is possible to upload a crafted PHP script to achieve remote command execution.
CVE-2021-37926 Critical 2021-10-07 Not applicable Forecast only Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-37918 Critical 2021-10-07 Not applicable Forecast only Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
CVE-2021-40324 High 2021-10-04 Not applicable Forecast only Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
CVE-2021-37539 Critical 2021-09-27 Not applicable Forecast only Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.
CVE-2021-3277 High 2021-06-07 Not applicable Forecast only Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads to remote code execution by uploading php files.
CVE-2021-21346 Critical 2021-03-23 Outside Waratek scope Forecast only XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVE-2021-21344 Critical 2021-03-23 Protected by Waratek Forecast only XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVE-2020-19364 High 2021-01-20 Not applicable Forecast only OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
CVE-2020-12255 High 2020-05-18 Not applicable Forecast only rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by checking content-type without considering the file extension and header. Thus, an attacker can exploit this by uploading a .php file to vendor.php that contains arbitrary PHP code and changing the content-type to image/gif.
CVE-2020-6754 Critical 2020-02-05 Not applicable Forecast only dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/assets (which should be a protected directory). Additionally, attackers can upload temporary files (e.g., .jsp files) into /webapps/ROOT/assets/tmp_upload, which can lead to remote command execution (with the permissions of the user running the dotCMS application).